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Abstract. We obtain some results about the repeated exponentiation modulo 
a prime power from the viewpoint of arithmetic dynamical systems. Especially, 
we extend two asymptotic formulas about periodic points and tails in the case 
of modulo a prime to the case of modulo a prime power. 



1. Introduction 

For a positive integer M, denote by Z/MZ the residue ring of Z modulo M 
and (Z/AfZ)* the unit group. For an integer fc > 2, we consider the following 
endomorphism of {Z/MZ)*, 

/ : (Z/AfZ)* {Z/MZ)*,x x''. 

For any initial value x £ (Z/il/Z)*, we repeat the action of /, then we get a 
sequence 

xq = X, Xn — Xj^_i^ n = 1, 2, 3, • • • . 
This sequence is known as the power generator of pseudorandom numbers. Studying 
such sequences in the cases that AI is a prime or a product of two distinct primes, is 
of independent interest and is also important for several cryptographic applications, 
see [1] |B] . From the viewpoint of cryptography, there are numerous results about 
these sequences, see the papers mentioned in [5], more recently see [3] and its 
references. 

If we view (Z/AfZ)* as a vertex set and draw a directed edge from a to 6 if 
/(a) = 6, then we get a digraph. There are also many results in this direction, see 
[l2] and the papers mentioned there, more recently see [8l \9\ \TO\\TT\. 

As [2], in this article we will study (Z/MZ)* under the action of / from the 
viewpoint of arithmetic dynamical systems, where M is a prime power. Especially 
we will extend two asymptotic formulas in [2] to the case of modulo a prime power. 

It is easy to see that for any initial value x € (Z/MZ)* the corresponding se- 
quence becomes eventually periodic, that is, for some positive integer Sk^Aiix) and 
tail tk.Aiix) < Sk.Aiix), the elements xq = x,xi, ■ ■ ■ , Xg^ m(x)-i are pairwise distinct 
and Xg^ ^j{x) = m(x)- So we can define a tail function tk.M on (Z/MZ)* . 

The sequence Xt^ Mix)^ ' ' ' ^^sk m(x)-1i ordered up to a cyclic shift, is called a 
cycle. The cycle length is Ck.mix) — Sk,M{x) — tk.M{x). The elements in the cycle 
are called periodic points and their periods are Ck^Aiix). So we can define a cycle 
length function Ck,M on {Z/MZ)* . In particular, [H [S] gave lower bounds for the 
largest period. 
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We denote by Pr{k, M) and P{k, M) respectively the number of periodic points 
with period r and the number of periodic points in {"L/MIa)* . Also, we denote 
by Cr(fc, M) and C(fc, M) respectively the number of cycles with length r and the 
number of cycles in (Z/AfZ)*. We denote the average values oick.M{x) and tk.jviix) 
over ah x e (Z/MZ)* by c{k,M) and t{k,M) respectively, 

where (/? is the Euler totient function. 

When M is an odd prime power, we will derive explicit formulas for Pr{k,M) 
and Cr{k,M) by the results in [10], and we will also derive explicit formulas for 
c{k, M) and t{k, M) which generalize those in pTT] . 

For two integers r, m > 1, we call the limit of lim —r^ Pr{k,p"'^) the 

asymptotic mean number of periodic points with period r in {'L/p^'L)* for different 
choices of prime p, and we denote it by APr{k,ni). Similarly, we can define the 
asymptotic mean number for cycles with length r and denote it by ACr{k, m). We 
will derive explicit formulas for APr{k,m) and ACr{k,m). 

For an integer m > 1, following [TT], we study the average values of P{k,p"^) 
and t{k,p'"'') over all primes p < N, 

So{k,m,N) = ^ E ^(fc'P")' S{k,m,N) = ^ E ^(^'P™)" 

''^^ ' p<N ""^ ' p<N 

where, as usual, 7r(A^) is the number of primes p < N . Following the method in [2], 
we will get asymptotic formulas for So{k,'m, N) and S{k,m, N). 



2. Preparations 

For two integers I and n, we denote their greatest common divisor by gcd{l,n). 
For a positive integer n, we denote by r(n) the number of its positive divisors. 
Theorem 4.9 in [7] tells us that 

(2.1) lim -i- V gcd(p - 1, n) = r(n). 

X-S-oo TT A ) ^ — ' 

For two integers m > 1 and n > 2, we denote the largest prime divisor of n by 
q. Then we have 

1™ E gcd(p™-i(p- l),n) 

(2.2) ^ ' q<P<X 

= J™ ¥Do E gcd(p-l,n) 

X^oo >^ ^ q<p<X 

= T{n). 

Notice that if p is an odd prime, gcd(p™ — is the number of solutions of 

the equation x" 1 in (Z/p^Z)*. 
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Given two integers a and n with gcd(a, n) — 1, following the method in the proof 
of Formula (2) in |2], we can get 

(2.3) J2 P"' = ( ( M y + 0{X^^+Hu-'X). 

[m 4- l)(p[n)mX 

p=a (mod n) 

Then we have 

(2.4) y p"''\p - 1) = , , , ^ + 0{X"'+Hn-^X). 

(m + l)^(n)lnX 

p^a (mod n) 

Following the same method in the proof of Formula (4) in [2], we have 

(2.5) V p^'\p-\)=0{ +X™). 



p^a (mod n) 



3. Main Results 



For two integers d and n satisfying gcd((i, n) = 1, we denote the multiplicative 
order of n modulo d by ordd?^• For an integer n and a prime p, we denote Vp{n) the 
exact power of p dividing n. 

Let fi be the Mobius function. For a real number a, we denote [a] the least 
integer which is not less than a. 

Write k = p^^p^'^ ■ ■ -p"^" > 2, where Pi, - ■ ■ ,Ps are distinct primes, pi < P2 < 
■ ■ ■ < Ps and ni, ■ ■ ■ ,71^ > 1. Let m be a fixed positive integer. 

Proposition 3.1. Let p be an odd prime and r be a positive integer. Write — 
pin-i _ . . .^r^ . where ri, ■ • • , Ts > are integers and gcd(pi • • -PsjP) — 1- 
We have 

(1) a(fc,p") = i E M('^)gcd(p" - fc'^/'^ - 1). 

d\r 

(2) Pr{k,p"^) = EA*(rf)gcd(p'" - 1). 

(i|r 

(3) P(fc,p") = p. 

(4) C(fc,p™)=E^- 

d\p 

(5) For anj/ a; G (Z/p™Z)*, denote ordpmx &j/ ordx, Cfe_pm(a;) = ordgcd(orda;,p)fc- 

(6) c(fc,p™) = iEv'(rf)orddfc. 

d\p 

(7) For any a; G (Z/p™Z)*, denote ordpnix fty ords, 

f t>p,(orda;) Wp^ordaO. «p^ (ordx) . 

(8) t(fc,p™) = ^;^ E ^(d)max{r^l,...,r^l}.. 

Proof. (1) and (2) By Mobius inversion formula and Theorem 5.6 in |10] . 

(3) A special case of Corollary 3 in [12]. 

(4) By Theorem 2 and Theorem 3 in [12]. 

(5) By Lemma 3 and Theorem 2 in [12] . 
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(6) Denote ■ ■ -p^^^ by w, from (5), we have 



a;e( 

= p,„_p^-i E E </5(rf)ordrffc = ^ E <^(rf)ordrffc. 

n\'w d\p d\p 

(7) Let Wx be the factor of ordx such that is the largest factor relatively 
prime to k. By Lemma 3 in |12] . we have tk,p"^ {x) is the least non- negative integer 
I such that 'Wx\k^ ■ In other words, tk^pm{x) is the least non- negative integer I such 
that Wp. (orda:) < /rii, for any 1 < « < s. Then we get the desired result. 

(8) Notice that for any x £ (Z/p™Z)*, orda;|(p™ —p™~^), and there are (^{oYdx) 
elements with the order orda;. By (7), we have 

tik. P-) = ^.^^ E ^('^)-- 1 r^i ' r^i , • • • , j • 

c;|(p™_p>n-i) 

Furthermore, we have 
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rflpl •••p?p 



ii=0 is=Oci|p 

Y.v{d) E ••• 



Pi •••p= ,1 . 



E ^^^(rf)max{r^l,...,r^l}. 



□ 



Remark 3.2. If we put k = 2 and m = 1, then the formulas (3), (4), (6) and (8) 
correspond to Theorem 6 in ^11, . 

Remark 3.3. Since the conclusions in [TO] and [T^] we apply are about the general 
case of modulo a positive integer, it is easy to get similar formulas for the case of 
p = 2. 

Proposition 3.4. Let r be a positive integer, we have 

(3.1) APrik, m) = J2 t^{d)T{k'-/'^ - 1), 

d\r 

(3.2) ACr{k,m) = -^^l{d)T{¥/'^~l). 

^ d\r 

Proof. Combing (I2.2p and Proposition 13. II (1) and (2), we can get the desired for- 
mulas. □ 

In the following, we denote by 51 the set of positive 5-units with S = {pi, • • • ,Ps\- 
Here a positive iS-unit means a positive integer whose prime divisors all belong to 
S. 

Proposition 3.5. We have Van = { f\ - 1 ) . 
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Proof. Put Q = P1P2 ■ ■ - Ps and denote by Uq the set of integer u,l < u < Q, such 
that gcd(u, Q) = I. 

For each odd prime p, let pp be the largest divisor of — p™~^ coprime to 
P1P2 ■ ■ 'Ps- It is easy to see 

So{k,m,N) r ^ sr^ 
lim — = Imi — —-- > p„. 

Ps<P<N 

Notice that if a prime p > Ps, then Vp^ {p"^ —p™~^) = Vp. (p — 1) for any 1 < i < s. 
Hence, following the method in Theorem 2 of we have 

lim ^o{k,m,N) ^ ^.^ — l^y -1 y y (/" -p—i). 

^ ' qen ueUq p<N 

p~qu-{-l (mod qQ) 



Following the method in Theorem 2 of [2], we have 

—y- 



So{k,m,N) 

N^J^oo TV™ ' m + 1 (72 

qeu 



Moreover, we have 



y ^ = y —- 1 

00 00 

Hence, we get the desired result. □ 

Corollary 3.6. We have < lim '^"^^^"'^^ < 2!^. 

Proof. Notice that for any prime p, we have 

1 

— i — i 



Given q = ■ • • p^^ S fi, we denote 

^(,)a5:^(d)max|r^i,...,r^ij 



Proposition 3.7. We have lim S{k,m,N)— ^ 



□ 
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Proof. Given q = p^^ ■ ■ ■ p^/ G fi. Suppose ri > 1, we want to estimate - ^ ^{(1) f ^'' ] . 

d\q 

For simplicity, we replace pi , ri and ni by p, r and n respectively. By division al- 
gorithm, we write r = ln + d with < d < n. We have 



d\q d\p'' 



2n In ln-\-d 



Hence, we have 



(3.3) 



i—1 z— n+1 — l)n+l i— /n+1 

p'- p'-(p"-i) p-- 
< Z + + 1) < 3r. 



dig 

< 3(ri + --- + r,) 

< jl5ln'? = 0(lng). 



Similarly to Proposition 13. 5[ by Proposition 13. II f8). we have 

lim S{k,m,N)^ lini V V V 1. 

^ ' qen u£Uq p<n 

p=qu+l (mod qQ) 

Then following the method in Theorem 2 of ^2], we can get the desired result. □ 
Corollary 3.8. We have i < ^lim S{k,m,N) < ^^^y;^^^^^ . 



Proof. On one hand we have 



J2 ^(g) > J2 y(p'/---Pa°) 



_ (Pi-l)-(p.-l) 



Pl-Ps p,- 



On the other hand, by p.3p we have tp{q) < 51ng, then we have 

^ ^ 5 In g 
g60 gSO ' 

gen 
= 5 E 



(N/pr-i)-(vp7-i) • 

□ 



on the cycle structure of repeated exponentiation modulo a prime power 

4. Remarks on the general case 

In this section, we will give some remarks on the case of modulo a positive 
integer. 

We can deduce formulas for Cr{k,M) and Pr{k,M) directly from Theorem 5.6 
in [1^ . Corollary 3 in 12^ has given a formula for P{k,AI). We can also derive a 
formula for C{K, M) directly by applying Theorem 2 and Theorem 3 in |12j . 

Following the same methods, we can easily determine the cycle length function 
Ck,M{x) and the tail function tk^A-iix) on (Z/A/Z)*, then we can get formulas for 
c(fc,M) and t{k,M). 

In fact, [121 and \W can tell us more information about the properties of repeated 
exponentiation modulo a positive integer. 
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